PT-2023-26187 · Beijing Netcon · Ns-Asg

Cyn521 · Publicado 2023-07-20 · Atualizado 2024-05-17 · CVE-2023-3792

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Beijing Netcon NS-ASG version 6.3

Description A problematic issue has been found in the software, affecting an unknown part of the file /admin/test status.php. The manipulation of this issue leads to a direct request. The details of this issue have been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.

Recommendations For version 6.3, consider restricting access to the /admin/test status.php file until a fix is available. As a temporary workaround, avoid using the file /admin/test status.php to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2023-3792

Produtos afetados

Ns-Asg

Referências · 6

• 🔥 https://github.com/CYN521/cve/blob/main/NS-ASG.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3792 · Nota de Segurança
• https://vuldb.com/?ctiid.235059 · Nota
• https://osv.dev/vulnerability/CVE-2023-3792 · Aviso do Fabricante
• https://t.me/cvenotify/54797 · Publicação no Telegram
• https://vuldb.com/?id.235059 · Nota